Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: yhNSCxqZFqTthzAJrNlTBYsnPMQdxMWqJHy1RLyduk8=
Subject key identifier: 85:E5:45:68:7A:E8:80:D3:53:73:B5:9B:CB:B4:21:03:B2:3C:34:3B
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A0BCF94D066F9C5B187ECE8F45D8D23B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 07BB
Signing time: Sun 20 Sep 2026 04:00:49 +0000
Manifest this update: Sun 20 Sep 2026 04:00:49 +0000
Manifest next update: Mon 21 Sep 2026 04:00:49 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: d0jfrggFXeJ83aJnQ6cPllpnhMPLJAHFTeIs2pFZDTE=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:4d:06:6f:9c:5b:18:7e:ce:8f:45:d8:d2:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Sep 20 04:00:49 2026 GMT
Not After : Sep 21 04:00:49 2026 GMT
Subject: CN=85e545687ae880d35373b59bcbb42103b23c343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:fc:73:94:2d:f0:1e:41:6c:96:1c:55:cc:
03:75:90:5b:e1:b5:2a:21:d9:00:3f:b8:ee:a4:ad:
bb:f7:83:59:87:82:5e:fc:b8:7b:cb:dc:ee:f0:bb:
99:01:7d:51:38:78:ef:dc:fe:9f:de:b1:50:7a:b0:
87:d4:cc:53:0a:fd:a2:54:9d:52:bc:dd:29:80:db:
d6:a0:6b:be:ac:72:4a:59:27:91:26:d0:68:07:3d:
8c:e5:59:fc:83:d2:d0:fd:cd:07:c5:74:76:e8:0e:
80:ef:68:f9:da:dd:6a:55:44:d3:ba:0c:6a:a2:3f:
69:43:92:c5:74:eb:d2:e2:24:bf:83:a5:94:09:4a:
3e:d8:e8:eb:87:c0:05:9a:ba:a0:59:7c:08:de:36:
59:53:1e:c4:26:ed:f2:ee:d3:58:ce:b9:c3:93:db:
42:2e:66:c4:6c:fa:e0:2f:ee:07:71:66:b8:3d:64:
2b:2a:08:95:08:fb:be:8e:f1:5f:03:3a:8f:6b:02:
22:d0:44:00:02:13:e3:4e:77:a2:c3:0c:2c:cd:cd:
55:d9:cf:67:9c:2c:f5:ac:a1:a4:9e:fd:3f:33:65:
32:8c:c4:e4:05:da:67:dc:48:73:fc:b7:39:9d:d7:
11:66:3a:ac:25:1e:f4:fc:e5:7f:a2:e8:65:1e:0b:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E5:45:68:7A:E8:80:D3:53:73:B5:9B:CB:B4:21:03:B2:3C:34:3B
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:78:dd:fb:a6:d5:5a:3c:39:5b:1b:8f:b8:d3:f3:8b:e3:
4a:6a:72:6c:14:9a:98:26:5d:d8:3b:72:6d:7b:90:e1:dc:6d:
66:fb:c0:6b:64:db:08:7a:c8:ae:50:4b:15:35:89:b8:51:e0:
25:e5:e0:94:5b:e6:90:de:9b:49:7f:f2:db:8d:71:16:7e:82:
4d:b9:ae:ff:1c:c9:e8:8d:75:3b:8c:86:b3:d8:81:25:bc:35:
a3:02:1c:e5:09:8b:38:8f:0d:75:cc:85:34:43:69:27:58:8b:
77:20:1c:33:83:c4:bb:0a:d6:88:9e:a6:46:b8:40:ca:03:aa:
59:a4:68:41:e0:eb:8c:e7:26:a4:5c:5a:dd:a8:a3:fc:8d:8d:
c8:75:5c:43:93:ed:1a:ea:52:85:0c:59:98:30:3e:79:7f:b0:
6f:a2:e7:0a:83:51:62:9f:37:9e:7f:69:1e:2e:d3:70:2a:23:
53:5e:11:4d:98:cc:20:d7:8f:99:3d:6b:7c:0a:02:4d:21:9f:
93:11:35:75:b1:07:c4:02:e3:fd:85:2c:60:6b:4b:0b:50:7f:
b0:ec:6e:67:35:2e:3c:b2:e6:a1:ab:90:1a:5f:91:97:9b:38:
ae:ce:1a:71:0e:fd:fb:28:dc:c3:7d:65:72:06:75:53:02:74:
68:9d:e0:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+U0Gb5xbGH7Oj0XY0jtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjYwOTIwMDQwMDQ5WhcNMjYwOTIxMDQwMDQ5WjAzMTEwLwYDVQQD
Eyg4NWU1NDU2ODdhZTg4MGQzNTM3M2I1OWJjYmI0MjEwM2IyM2MzNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2H8c5Qt8B5BbJYcVcwDdZBb4bUq
IdkAP7jupK2794NZh4Je/Lh7y9zu8LuZAX1ROHjv3P6f3rFQerCH1MxTCv2iVJ1S
vN0pgNvWoGu+rHJKWSeRJtBoBz2M5Vn8g9LQ/c0HxXR26A6A72j52t1qVUTTugxq
oj9pQ5LFdOvS4iS/g6WUCUo+2Ojrh8AFmrqgWXwI3jZZUx7EJu3y7tNYzrnDk9tC
LmbEbPrgL+4HcWa4PWQrKgiVCPu+jvFfAzqPawIi0EQAAhPjTneiwwwszc1V2c9n
nCz1rKGknv0/M2UyjMTkBdpn3Ehz/Lc5ndcRZjqsJR70/OV/ouhlHgtzBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXlRWh66IDTU3O1m8u0IQOyPDQ7MB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfl43fum
1Vo8OVsbj7jT84vjSmpybBSamCZd2DtybXuQ4dxtZvvAa2TbCHrIrlBLFTWJuFHg
JeXglFvmkN6bSX/y241xFn6CTbmu/xzJ6I11O4yGs9iBJbw1owIc5QmLOI8NdcyF
NENpJ1iLdyAcM4PEuwrWiJ6mRrhAygOqWaRoQeDrjOcmpFxa3aij/I2NyHVcQ5Pt
GupShQxZmDA+eX+wb6LnCoNRYp83nn9pHi7TcCojU14RTZjMINePmT1rfAoCTSGf
kxE1dbEHxALj/YUsYGtLC1B/sOxuZzUuPLLmoauQGl+Rl5s4rs4acQ79+yjcw31l
cgZ1UwJ0aJ3gvg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:21:57 2026 by rpki-client